SAP Process Control vs. Vanta

SAP Process Control is well suited for managing the end to end lifecycle of controls across different regulations. When managing a risk and controls framework it is better suited for public companies that have regulation requirements. The tool does not offer good capabilities for managing robust IT regulations. It would be good if there's improvement to the tool so it can be used to manage IT assets.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Workflows - The workflows of SAP Process Control are extremely helpful
• Reporting - Standard reports as well as the connection to SAP AC is very helpful
• Continuous Control Monitoring is the way to go in ICS Topics in the future.
• Handling of users - Assignment and Replacements
• Spot Checks - Helpful workflows and setup

Incentivized

• Integrations with source control and infrastructure providers.
• Guidance around what makes a company's policy secure.
• Portals that supply our auditors with everything they need to write their reports.

Incentivized

• Integrated attachments functionality (i.e., edit Word/Excel documents within SAP PC, rather than having to download the files locally)
• More flexible dashboarding capabilities
• Better out of the box reporting
• No out of the box content for Controls, Regulations

Incentivized

• Alerts and employee onboarding and offboarding were not entirely complete when we started using the product.
• It would be nice if we could assign policies to specific people in the Vanta app.
• Sometimes, refreshing the tests when you make the changes to pass takes a little more time than desired.

Incentivized

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

The connectivity with other SAP products out of the SAP GRC suite, like Access Control and so on, was key for the decision. Also we had an already mature SAP System landscape as well as having internal processes that were similar to the SAP Process Control standard processes helped us with the decision to implement SAP Process Control.

Incentivized

Osano and Vanta both meet our requirements at a comparable rate. When comparing quality of ongoing product support, we felt that Vanta is the preferred option. For feature updates and roadmaps, we preferred the direction of Osano over Vanta.

Incentivized

Works as intended

Incentivized

• Significant control on risks
• Significant savings on audit testing can be achieved
• Automation of risk management has a lot of audit standardization and confidence in compliance
• Reliability of automated controls reduces time vested in testing the standard controls

• In my experience, they aren't really helpful after all. They ended causing more problems when documents went missing on our trust page. They caused us some embarrassment when we referred people to a mostly empty page.
• They are now attempting to, in my opinion, force us to renew service.